mag/WMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

M3 Security Fixes for Pass 41

Browse Source
This commit is contained in:
Mark Gregory
2026-09-17 13:37:19 +01:00
parent a9b63e43b3
commit 15773b0bce
56 changed files with 169 additions and 216 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Modules/M3/Routes/web.php
+57 -57
View File
@@ -1,29 +1,29 @@
<?php
use Illuminate\Support\Facades\Route;
use Modules\M3\Http\Controllers\authController;
use Modules\M3\Http\Controllers\AuthController;
use Modules\M3\Http\Controllers\BoxPackToPalletController;
use Modules\M3\Http\Controllers\carrierMaintController;
use Modules\M3\Http\Controllers\dashboardController;
use Modules\M3\Http\Controllers\execSummaryController;
use Modules\M3\Http\Controllers\execSummaryLineController;
use Modules\M3\Http\Controllers\fillBOL2Controller;
use Modules\M3\Http\Controllers\fillBOLController;
use Modules\M3\Http\Controllers\CarrierMaintController;
use Modules\M3\Http\Controllers\DashboardController;
use Modules\M3\Http\Controllers\ExecSummaryController;
use Modules\M3\Http\Controllers\ExecSummaryLineController;
use Modules\M3\Http\Controllers\FillBOL2Controller;
use Modules\M3\Http\Controllers\FillBOLController;
use Modules\M3\Http\Controllers\GetContentsController;
use Modules\M3\Http\Controllers\M3CallCloseAPIController;
use Modules\M3\Http\Controllers\M3DeliveryController;
use Modules\M3\Http\Controllers\MFOrdersController;
use Modules\M3\Http\Controllers\palletQtyController;
use Modules\M3\Http\Controllers\pendingClosureController;
use Modules\M3\Http\Controllers\sentinelController;
use Modules\M3\Http\Controllers\PalletQtyController;
use Modules\M3\Http\Controllers\PendingClosureController;
use Modules\M3\Http\Controllers\SentinelController;
use Modules\M3\Http\Controllers\ShipToController;
use Modules\M3\Http\Controllers\userControlController;
use Modules\M3\Http\Controllers\userPickingStats4;
use Modules\M3\Http\Controllers\userPickingStats5;
use Modules\M3\Http\Controllers\UserControlController;
use Modules\M3\Http\Controllers\UserPickingStats4;
use Modules\M3\Http\Controllers\UserPickingStats5;
// Sentinel
use Modules\M3\Http\Controllers\userProfileController;
use Modules\M3\Http\Controllers\UserProfileController;
// Warehouse Performance
use Modules\M3\Http\Controllers\utilitiesContoller;
use Modules\M3\Http\Controllers\UtilitiesController;
use Modules\M3\Http\Controllers\WhsePerfController;
// Pack Box To Pallet
use Modules\M3\Http\Controllers\WhsePerfDetailsController;
@@ -32,7 +32,7 @@ use Modules\M3\Http\Controllers\WhsPerfMetrics;
// Not Used
// use Modules\M3\Http\Controllers\orderInquiryController;
// use Modules\M3\Http\Controllers\ordersOnHoldReqController;
// use Modules\M3\Http\Controllers\userPickingStats4;
// use Modules\M3\Http\Controllers\UserPickingStats4;
// use Modules\M3\Http\Controllers\ReplenishSettingsController;
Route::get('/assets/{path}', function (string $path) {
@@ -68,47 +68,47 @@ Route::get('/assets/{path}', function (string $path) {
Route::get('/health', fn () => response()->json(['module' => 'M3', 'status' => 'ok', 'database' => config('m3.connection', 'pgsql')]))->name('health');
// Admin Panel
Route::get('/', [dashboardController::class, 'index'])->name('index');
Route::get('/', [DashboardController::class, 'index'])->name('index');
// Utilities utilitiesContoller
Route::get('/utilities', [utilitiesContoller::class, 'index'])->name('utilities');
Route::get('/pdfReadWrite', [utilitiesContoller::class, 'pdfReadWrite'])->name('pdfReadWrite');
Route::get('/fixICM799MSentPKR', [utilitiesContoller::class, 'fixICM799MSentPKR'])->name('fixICM799MSentPKR');
Route::get('/generateGS128', [utilitiesContoller::class, 'generateGS128'])->name('generateGS128');
Route::get('/miscTests', [utilitiesContoller::class, 'miscTests'])->name('miscTests');
// Utilities UtilitiesController
Route::get('/utilities', [UtilitiesController::class, 'index'])->name('utilities');
Route::get('/pdfReadWrite', [UtilitiesController::class, 'pdfReadWrite'])->name('pdfReadWrite');
Route::get('/fixICM799MSentPKR', [UtilitiesController::class, 'fixICM799MSentPKR'])->name('fixICM799MSentPKR');
Route::get('/generateGS128', [UtilitiesController::class, 'generateGS128'])->name('generateGS128');
Route::get('/miscTests', [UtilitiesController::class, 'miscTests'])->name('miscTests');
// logout
Route::get('/logout', [authController::class, 'logout'])->name('logout');
Route::get('/logout', [AuthController::class, 'logout'])->name('logout');
// orderInquiry
// Route::get('/orderInquiry', [orderInquiryController::class, 'index'])->name('orderInquiry');
// Route::post('/gotoOrder',[ordersOnHoldReqController::class, 'order'])->name('ordersOnHoldReqOrder');
// v4
Route::get('/userPickingStats4', [userPickingStats4::class, 'index'])->name('userPickingStats4');
Route::post('/userPickingStats4', [userPickingStats4::class, 'index'])->name('userPickingStats4');
Route::get('/UserPickingStats4', [UserPickingStats4::class, 'index'])->name('UserPickingStats4');
Route::post('/UserPickingStats4', [UserPickingStats4::class, 'index'])->name('UserPickingStats4');
// userControl
Route::get('/userControl', [userControlController::class, 'index'])->name('userControl');
Route::post('/userControl', [userControlController::class, 'index'])->name('userControl');
Route::post('/userControl/saveUserAdd', [userControlController::class, 'saveUserAdd'])->name('saveUserAdd');
Route::post('/userControl/saveUserEdit', [userControlController::class, 'saveUserEdit'])->name('saveUserEdit');
Route::get('/userControl/callCL', [userControlController::class, 'callCL'])->name('callCL');
Route::post('/userControl/savePassword', [userControlController::class, 'savePassword'])->name('savePassword');
Route::get('/userControl', [UserControlController::class, 'index'])->name('userControl');
Route::post('/userControl', [UserControlController::class, 'index'])->name('userControl');
Route::post('/userControl/saveUserAdd', [UserControlController::class, 'saveUserAdd'])->name('saveUserAdd');
Route::post('/userControl/saveUserEdit', [UserControlController::class, 'saveUserEdit'])->name('saveUserEdit');
Route::get('/userControl/callCL', [UserControlController::class, 'callCL'])->name('callCL');
Route::post('/userControl/savePassword', [UserControlController::class, 'savePassword'])->name('savePassword');
// palletQty
Route::get('/palletQty', [palletQtyController::class, 'index'])->name('palletQty');
Route::post('/palletQty', [palletQtyController::class, 'index'])->name('palletQty');
Route::post('/palletQty/saveQtyAdd', [palletQtyController::class, 'saveQtyAdd'])->name('saveQtyAdd');
Route::post('/palletQty/saveQtyAdd2', [palletQtyController::class, 'saveQtyAdd2'])->name('saveQtyAdd2');
Route::post('/palletQty/saveQtyEdit', [palletQtyController::class, 'saveQtyEdit'])->name('saveQtyEdit');
Route::get('/palletQty', [PalletQtyController::class, 'index'])->name('palletQty');
Route::post('/palletQty', [PalletQtyController::class, 'index'])->name('palletQty');
Route::post('/palletQty/saveQtyAdd', [PalletQtyController::class, 'saveQtyAdd'])->name('saveQtyAdd');
Route::post('/palletQty/saveQtyAdd2', [PalletQtyController::class, 'saveQtyAdd2'])->name('saveQtyAdd2');
Route::post('/palletQty/saveQtyEdit', [PalletQtyController::class, 'saveQtyEdit'])->name('saveQtyEdit');
// carrierMaint
Route::get('/carrierMaint', [carrierMaintController::class, 'index'])->name('carrierMaint');
Route::post('/carrierMaint', [carrierMaintController::class, 'index'])->name('carrierMaint');
Route::post('/carrierMaint/saveCarrierAdd', [carrierMaintController::class, 'saveCarrierAdd'])->name('saveCarrierAdd');
Route::post('/carrierMaint/saveCarrierAdd2', [carrierMaintController::class, 'saveCarrierAdd2'])->name('saveCarrierAdd2');
Route::post('/carrierMaint/saveCarrierEdit', [carrierMaintController::class, 'saveCarrierEdit'])->name('saveCarrierEdit');
Route::get('/carrierMaint', [CarrierMaintController::class, 'index'])->name('carrierMaint');
Route::post('/carrierMaint', [CarrierMaintController::class, 'index'])->name('carrierMaint');
Route::post('/carrierMaint/saveCarrierAdd', [CarrierMaintController::class, 'saveCarrierAdd'])->name('saveCarrierAdd');
Route::post('/carrierMaint/saveCarrierAdd2', [CarrierMaintController::class, 'saveCarrierAdd2'])->name('saveCarrierAdd2');
Route::post('/carrierMaint/saveCarrierEdit', [CarrierMaintController::class, 'saveCarrierEdit'])->name('saveCarrierEdit');
// M3Delivery Maint
Route::get('/M3Delivery', [M3DeliveryController::class, 'index'])->name('M3Delivery');
@@ -143,14 +143,14 @@ Route::any('/StoreExcelToDisk', 'Modules\M3\Http\Controllers\OrderLinesOfClosedO
Route::any('/downloadFiles', 'Modules\M3\Http\Controllers\OrderLinesOfClosedOrder@downloadFiles')->name('downloadFiles');
// v5
Route::get('/userPickingStats5', [userPickingStats5::class, 'index'])->name('userPickingStats5');
Route::post('/userPickingStats5', [userPickingStats5::class, 'index'])->name('userPickingStats5');
Route::get('/UserPickingStats5', [UserPickingStats5::class, 'index'])->name('UserPickingStats5');
Route::post('/UserPickingStats5', [UserPickingStats5::class, 'index'])->name('UserPickingStats5');
// 732
// pendingClosure
Route::get('/pendingClosure', [pendingClosureController::class, 'index'])->name('pendingClosure');
Route::post('/pendingClosure', [pendingClosureController::class, 'index'])->name('pendingClosure');
Route::post('/allowRetry', [pendingClosureController::class, 'allowRetry'])->name('allowRetry');
Route::get('/pendingClosure', [PendingClosureController::class, 'index'])->name('pendingClosure');
Route::post('/pendingClosure', [PendingClosureController::class, 'index'])->name('pendingClosure');
Route::post('/allowRetry', [PendingClosureController::class, 'allowRetry'])->name('allowRetry');
// Ship To
Route::resource('ship-to', ShipToController::class)->parameters(['ship-to' => 'austcn'])->except(['show']);
@@ -166,16 +166,16 @@ Route::get('/MFOrders/{id}', [MFOrdersController::class, 'index'])->name('MFOrde
Route::any('/GetContentsForClose', [GetContentsController::class, 'processShipment'])->name('GetContentsForClose');
// Update Profile
Route::any('/userprofile', [userProfileController::class, 'index'])->name('userprofile');
Route::post('/userprofileupdate', [userProfileController::class, 'updateUserProfile'])->name('userprofileupdate');
Route::any('/userprofileupdateajax', [userProfileController::class, 'updateUserProfileAjax'])->name('userprofileupdateajax');
Route::any('/userprofile', [UserProfileController::class, 'index'])->name('userprofile');
Route::post('/userprofileupdate', [UserProfileController::class, 'updateUserProfile'])->name('userprofileupdate');
Route::any('/userprofileupdateajax', [UserProfileController::class, 'updateUserProfileAjax'])->name('userprofileupdateajax');
// Sentinel Functions
Route::any('/packSyst5Func', [sentinelController::class, 'packSyst5Func'])->name('packSyst5Func');
Route::any('/packSyst5Func', [SentinelController::class, 'packSyst5Func'])->name('packSyst5Func');
// Executives summary
Route::any('/execsummary', [execSummaryController::class, 'index'])->name('execsummary');
Route::any('/execsummaryline', [execSummaryLineController::class, 'index'])->name('execsummaryline');
Route::any('/execsummary', [ExecSummaryController::class, 'index'])->name('execsummary');
Route::any('/execsummaryline', [ExecSummaryLineController::class, 'index'])->name('execsummaryline');
// Warehouse Perf Metrics
Route::any('/whsePerf', [WhsePerfController::class, 'index'])->name('whsePerf');
@@ -185,11 +185,11 @@ Route::any('/whsePerfDetails', [WhsePerfDetailsController::class, 'index'])->nam
Route::any('/downloadFilesWhs', [WhsPerfMetrics::class, 'downloadFiles'])->name('downloadFilesWhs');
// BOL PDFs
Route::any('/fillBOL', [fillBOLController::class, 'index'])->name('fillBOL');
Route::any('/fillBOLPDF', [fillBOLController::class, 'fillBOL'])->name('fillBOLPDF');
Route::any('/fillBOL', [FillBOLController::class, 'index'])->name('fillBOL');
Route::any('/fillBOLPDF', [FillBOLController::class, 'fillBOL'])->name('fillBOLPDF');
Route::any('/fillBOL2', [fillBOL2Controller::class, 'index'])->name('fillBOL2');
Route::any('/fillBOL2PDF', [fillBOL2Controller::class, 'fillBOL'])->name('fillBOL2PDF');
Route::any('/fillBOL2', [FillBOL2Controller::class, 'index'])->name('fillBOL2');
Route::any('/fillBOL2PDF', [FillBOL2Controller::class, 'fillBOL'])->name('fillBOL2PDF');
// Pack Box to Pallet BoxPackToPalletController
Route::any('/BoxPackToPallet', [BoxPackToPalletController::class, 'index'])->name('BoxPackToPallet');